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CLAIMS 

What is claimed is: 

1 1. An automated process of detecting security 

2 vulnerabilities present in a target Web site, comprising the 

3 steps of: 

4 establishing an Internet connection with the target Web 

5 site; 

L.J 

y;i6 retrieving a default Web page for the target Web site; 

f!J7 parsing through the default Web page to identify any 

UB linked-to Web pages which are referenced by the default Web 

UB page; 

WO parsing through the default Web page to identify any 

OLD. hidden Uniform Resource Links (URLs) ; 

fl!2 scanning the target Web site to detect the presence of at 

13 least one exploit, and recording any detected exploits; and 

14 outputting the security vulnerabilities, comprising the 

15 successful exploits. 

1 2. The method of claim 1, further comprising applying at 

2 least one predetermined hack method to the linked-to Web pages 

3 and outputting a response from the target Web site to each 

4 hack method. 
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1 3. The method of claim 2, wherein the predetermined hack 

2 method comprises issuing a request to the target Web site 

3 wherein a file extension of a valid Web page is changed to 

4 determine whether an old version the valid Web page is 

5 available at the target Web site. 

1 4. The method of claim 1, further comprising parsing 

2 through the linked-to Web pages to identify any further- 

3 linked-to Web pages which are referenced by the linked-to Web 
y;J4 pages . 

OH 5. A system for detecting security vulnerabilities 

Ul2 present in a target Web site, comprising: 

f= :l 3 a. memory for storing: 

T\k 1. a valid Web page database; 

C£ 2. a vulnerable Web page database; 

6 3. at least one exploit; and 

7 4. a security vulnerability database; and 

8 b. a processor connected to the memory and being 

9 configured to establish an Internet connection with the target 

10 Web site, retrieve a default Web page for the target Web site, 

11 parse through the default Web page to identify any linked-to 

12 Web pages which are referenced by the default Web page, parse 

13 through the default Web page to identify any hidden Uniform 

14 Resource Links (URLs) , scan the target Web site to detect the 
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15 presence of the at least one exploit, record any detected 

16 exploits, and output the security vulnerabilities comprising 

17 the successful exploits. 
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